Malicious PDF — malware analysis report

Static analysis result for SHA-256 e648bb52d000ab81…

MALICIOUS

PDF

18.6 KB Created: 2020-03-15 21:06:06 +00:00 Authoring application: mPDF 5.7
MD5: 190d645b0898d30f1f5e96b117bc23c7 SHA-1: bc11376d212ab5f5827d26b63431531787008868 SHA-256: e648bb52d000ab81c96fb1dd4c339953df5eabc4345e5662f76136166cda73e6
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links pointing to external PDF files hosted on the domain 'ieuicufioao.myhome.cx'. This behavior is indicative of a link farm or a redirection scheme designed to lead users to potentially malicious content. The ML classifier also strongly flagged this PDF as malicious.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ieuicufioao.myhome.cx/8552550550554556/The-Lonely-Heart-Wanders-by-Matt-Banks.pdf
    • http://ieuicufioao.myhome.cx/9554559556557556/Schuldig-by-Manuela-Mendez.pdf
    • http://ieuicufioao.myhome.cx/9555553556555552/Betrogen-amp-Verbittert-by-Manuela-Mendez.pdf
    • http://ieuicufioao.myhome.cx/3555554557559553/Island-of-Dreams-by-Jasminne-Mendez.pdf
    • http://ieuicufioao.myhome.cx/4557551558551557/The-Black-Snowman-by-Phil-M-ndez.pdf
    • http://ieuicufioao.myhome.cx/5557559553553559/Papi-s-Lover-by-Jorge-A-Barriere-Mendez.pdf
    • http://ieuicufioao.myhome.cx/9554557559554552/Onetti-y-La-In-Fidelidad-a-Las-Reglas-del-Juego-by-R-S-Mendez-Clark.pdf
    • http://ieuicufioao.myhome.cx/5550558556559559/No-ventre-do-silencio-by-Xos-Lu-s-M-ndez-Ferr-n.pdf
    • http://ieuicufioao.myhome.cx/5551557559551559/The-Theology-of-Food-Eating-and-the-Eucharist-by-Angel-F-Mendez-Montoya.pdf
    • http://ieuicufioao.myhome.cx/4557556559559553/Argo-How-the-CIA-and-Hollywood-Pulled-Off-the-Most-Audacious-Rescue-in-History-by-Antonio-J-M-ndez.pdf
    • http://ieuicufioao.myhome.cx/9558554550555/As-the-Twig-Is-Bent-A-Matt-Davis-Mystery-Matt-Davis-Mysteries-1-by-Joe-Perrone-Jr-.pdf
    • http://ieuicufioao.myhome.cx/3550557556555550/As-The-Twig-Is-Bent-A-Matt-Davis-Mystery-Matt-Davis-Mysteries-1-by-Joe-Perrone-Jr-.pdf
    • http://ieuicufioao.myhome.cx/1552553558554552/Matt-Archer-Monster-Summer-Matt-Archer-1-5-by-Kendra-C-Highley.pdf
    • http://ieuicufioao.myhome.cx/1552556557550559/Matt-Archer-Blade-s-Edge-Matt-Archer-2-by-Kendra-C-Highley.pdf
    • http://ieuicufioao.myhome.cx/6553557552552555/Matt-Archer-Redemption-Matt-Archer-5-by-Kendra-C-Highley.pdf
    • http://ieuicufioao.myhome.cx/1558550551553/State-of-the-Heart-The-Practical-Guide-to-Your-Heart-and-Heart-Surgery-by-Larry-W-Stephenson.pdf
    • http://ieuicufioao.myhome.cx/7555552557558557/Ragtime-in-Kamuning-Sari-Sari-Essays-by-Sylvia-M-ndez-Ventura.pdf
    • http://ieuicufioao.myhome.cx/8559553555557558/The-Worlds-of-Matt-Busch-by-Matt-Busch.pdf
    • http://ieuicufioao.myhome.cx/7555556558550551/Saviors-a-Novel-by-Matt-Seidel-by-Matt-Seidel.pdf
    • http://ieuicufioao.myhome.cx/3559551553557551/The-New-Heart-of-Wisdom-Profound-Teachings-from-Buddha-s-Heart-by-Geshe-Kelsang-Gyatso.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.